Weekly briefing

Changes from 22 Dec 2008 – 28 Dec 2008 UTC and dates due up to 27 Jan 2009. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: Microsoft's out-of-band releases and security response notices, then exploited vulnerabilities, then up to 7 dates plus every lifecycle end in the window, open known issues, and other notable changes, with at most one entry per feed. A notice's action date is listed on its own unless it dates the record leading that day. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.